Vulnerabilities (CVE)

Filtered by vendor Tribe29 Subscribe
Filtered by product Checkmk
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-48321 1 Tribe29 1 Checkmk 2024-01-09 N/A 3.3 LOW
Limited Server-Side Request Forgery (SSRF) in agent-receiver in Tribe29's Checkmk <= 2.1.0p11 allows an attacker to communicate with local network restricted endpoints by use of the host registration API.
CVE-2023-6251 1 Tribe29 1 Checkmk 2023-11-30 N/A 3.5 LOW
Cross-site Request Forgery (CSRF) in Checkmk < 2.2.0p15, < 2.1.0p37, <= 2.0.0p39 allow an authenticated attacker to delete user-messages for individual users.
CVE-2023-23549 1 Tribe29 1 Checkmk 2023-11-21 N/A 2.7 LOW
Improper Input Validation in Checkmk <2.2.0p15, <2.1.0p37, <=2.0.0p39 allows priviledged attackers to cause partial denial of service of the UI via too long hostnames.